----- Original Message ----- From: Denis Bujoreanu To: [EMAIL PROTECTED] Sent: Tuesday, August 27, 2002 5:19 PM Subject: [WinPcap-users] Truncated packets
>When using packet.dll and packet.sys I get the following behaviour: > >When downloading a large HTML file (for example) with the NIC in promiscuous and filtering ony TCP traffic having port 80 in source or >destination I don't get the entire transmission but only parts of it (around 10%)> > >Could this be becasue my app takes too much time to process the packet and looses desyncs or is a limitation of the >packet.dll/packet.sys The problem is that your app takes too much time to process packets. As advised in another reply to your message, why don't you use the pcap API? Packet API is quite low level. For example, did you set the kernel buffer to a proper dimension? The pcap API does it for you. How did you filter the web traffic? By filtering packets at user level? This is a bottleneck. If you use the pcap API you can tell the kernel driver to bring only web traffic at user level. Last suggestion: please read the new documentation shipped with WinPcap 3.0 alpha developer's pack. GV ================================================================== This is the WinPcap users list. It is archived at http://www.mail-archive.com/[email protected]/ To unsubscribe use mailto: [EMAIL PROTECTED]?body=unsubscribe ==================================================================
